Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/509FDDC83E1F11F18282F1FECE1D38B0.roa
File: 509FDDC83E1F11F18282F1FECE1D38B0.roa (raw, json)
Hash identifier: 2yXERbjhpHAynGFKWu057zYvQLlCeC7lEH06tpnxXIQ=
Subject key identifier: 58:F0:AA:2B:08:8B:9E:33:27:B3:C7:2F:B3:DC:F1:E9:0F:5A:68:07
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01ADEB
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/509FDDC83E1F11F18282F1FECE1D38B0.roa
Signing time: Wed 22 Apr 2026 07:46:05 +0000
ROA not before: Wed 22 Apr 2026 07:46:00 +0000
ROA not after: Thu 28 May 2026 07:46:00 +0000
asID: 402425
IP address blocks: 45.202.46.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 15 May 2026 00:26:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 110059 (0x1adeb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 22 07:46:00 2026 GMT
Not After : May 28 07:46:00 2026 GMT
Subject: CN=69e87cbc-0f9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:99:36:cf:6f:13:b1:99:17:c4:9d:b0:62:98:
f0:8a:6c:73:35:8e:b7:ff:f3:d1:e8:3c:51:7a:09:
13:9e:e9:e4:7c:09:09:c2:cf:47:e8:a0:b1:69:53:
5b:0a:5a:04:99:ae:c8:5f:d6:eb:97:2e:2e:ed:0c:
e8:a8:3c:a7:04:ef:90:96:03:23:3e:64:a8:c2:c9:
f9:03:ab:a0:36:16:43:10:d4:16:a8:fc:0e:1d:56:
9f:a2:83:07:e7:15:02:44:df:b7:be:b8:f1:d4:6d:
00:8c:15:d1:9b:12:94:09:b8:69:0d:71:eb:30:72:
b9:c5:bf:e3:b4:9a:cb:e9:b5:c5:10:1b:b0:94:6e:
89:ef:44:8a:86:4e:ec:f8:7c:20:1d:0f:96:f8:fd:
47:81:aa:2e:9f:c5:bf:df:f5:e8:b7:ed:bd:2d:f7:
5b:d2:c1:82:cd:a8:f8:de:f0:3f:cf:58:6d:0a:93:
e5:ac:90:b3:5a:43:5f:85:e9:e2:1d:ed:77:3e:7f:
2f:eb:aa:82:84:dc:e8:d6:60:e8:f6:20:4e:0c:5f:
c9:af:32:7d:a7:fb:56:df:fd:b9:51:de:cd:61:33:
f0:90:33:e4:2d:03:13:d4:86:e9:59:df:77:41:54:
c1:91:da:2d:80:c3:64:34:2d:66:be:c9:a6:dd:90:
c2:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:F0:AA:2B:08:8B:9E:33:27:B3:C7:2F:B3:DC:F1:E9:0F:5A:68:07
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/509FDDC83E1F11F18282F1FECE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.202.46.0/24
Signature Algorithm: sha256WithRSAEncryption
43:09:af:7a:30:f4:05:57:5e:f6:9b:74:70:0a:53:88:78:00:
0a:ea:77:1c:e7:7b:6f:8f:74:77:69:72:11:ef:16:68:3b:e0:
e5:1f:48:cf:32:4b:78:74:9d:04:05:0e:3e:93:68:b1:f5:ff:
d2:d5:68:2f:1a:cb:11:ac:d0:14:32:a6:df:db:bf:54:12:e2:
e7:ea:f5:1e:96:31:54:06:ab:57:82:cb:a9:59:5f:a2:81:57:
8d:3b:b0:77:b5:cb:f2:5b:de:68:26:fe:e8:22:b0:3f:fa:1d:
a8:30:85:3c:d2:2c:c1:54:a7:bd:29:96:a3:08:55:fd:ab:e5:
a5:f9:e0:bf:82:40:a4:87:99:f3:2a:d0:11:41:47:eb:99:42:
1a:ba:4c:91:e0:0b:d6:c7:cf:5b:35:6d:2f:19:fe:f0:39:d8:
86:b2:52:4b:50:b5:56:17:73:fd:c2:76:1e:56:a3:29:f2:82:
c6:d3:d5:70:e1:b4:8b:30:e3:1f:b5:ba:06:f7:a7:79:8b:d2:
3e:f1:79:38:55:4e:eb:fb:e6:ca:69:0e:75:2c:4c:06:64:02:
8d:87:38:a8:67:78:75:4f:2e:63:44:46:b0:44:b9:20:f9:55:
e3:a5:3a:7c:8e:22:b4:ce:8a:bf:e9:65:40:03:ad:42:a1:e0:
b4:0a:1f:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:46:33 2026 by rpki-client